13 Jul
2015
13 Jul
'15
10:44 a.m.
On Mon, Jul 13, 2015 at 10:41:01AM +0000, Martijn Grooten wrote:
On Mon, Jul 13, 2015 at 10:16:36AM +0100, Michael
Stevens wrote:
It looks like it's only patched in Ubuntu from that link? Although of
course I could pickup the patch by myself.
I'm using prayer's direct http(s) server, although a proxy *is* an
option.
Michael
Has anyone got any recommendations for webmail
software? I've been using
prayer (http://www-uxsup.csx.cam.ac.uk/~dpc22/prayer/) but it seems to
be vulnerable to POODLE and unlikely to get patched
This suggests that POODLE was actually patched:
https://bugs.launchpad.net/ubuntu/+source/prayer/1.3.5-dfsg1-3
I'm not familiar with Prayer, so I might be missing something. However,
POODLE isn't too a big deal and, realistically, only affects HTTPS
anyway (not STARTTLS). And seeing as POODLE uses Apache for its web
interface you should be able to disable SSL 3.0 in there.
Martijn.
PS I know that doesn't answer your question, for which I apologise.